Lucene search
Veracode Vulnerability DatabaseVERACODE:7402HistorySep 03, 2018 - 5:35 a.m.
Cross-site Scripting (XSS)
2018-09-0305:35:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
25.8%
github.com/portainer/portainer is vulnerable to cross-site scripting (XSS) attacks. The library does not use HTTP Secure Headers, allowing a malicious user to inject and execute arbitrary Javascript through the Team Name field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/portainer/portainer | eq | HEAD | |
| github.com/portainer/portainer | le | 1.19.1 |
Related
cvelist
cvelist
CVE-2018-16316
2018-09-01 18:00:00
cve
cve
CVE-2018-16316
2018-09-01 18:29:00
nvd
nvd
CVE-2018-16316
2018-09-01 18:29:00
prion
prion
Cross site scripting
2018-09-01 18:29:00